
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
File: pfsx1NUSX3yarlADNaSA_HeQjxU.mft (raw, json)
Hash identifier: 6OiOW+et07N3yV02slhJlgN6v5ot+Vl5LM7mAh/ynUk=
Subject key identifier: 99:2A:98:38:0F:3C:2C:47:29:8A:01:11:E2:4D:43:03:DD:F1:88:7E
Authority key identifier: A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15
Certificate issuer: /CN=A91A4A13/serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15
Certificate serial: 028A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
Manifest number: 0282
Signing time: Wed 29 Jul 2026 02:54:05 +0000
Manifest this update: Wed 29 Jul 2026 02:54:05 +0000
Manifest next update: Wed 05 Aug 2026 02:54:05 +0000
Files and hashes: 1: pfsx1NUSX3yarlADNaSA_HeQjxU.crl (hash: cR1GiYyU/GppNORMFjqmiRVab9GTbMleOUTSqnzWGf8=)
2: A8D327E4BBC711ED8DF23C40C4F9AE02.roa (hash: BbJgy4+r5xqumD47JYCsm8jlMt7XgJ8HLQRHYGqlUlQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl
rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 05 Aug 2026 02:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 650 (0x28a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4A13, serialNumber=A5FB31D4D5125F7C9AAE500335A480FC77908F15
Validity
Not Before: Jul 29 02:54:05 2026 GMT
Not After : Aug 5 02:54:05 2026 GMT
Subject: CN=6a696b4d-9940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ed:1e:dd:54:44:66:2d:77:fe:d4:a5:fd:3a:
43:56:4a:41:10:52:38:1e:aa:1d:20:35:72:28:42:
ae:b7:70:9c:a4:2e:2c:8c:bd:4a:4c:0c:d1:c0:6f:
02:fd:5e:3c:d4:85:60:fd:df:d8:63:f2:4b:73:cb:
cb:a5:9d:c6:99:cb:83:c4:2d:6a:46:bc:5d:c7:95:
72:78:e6:07:ae:d5:7d:b8:aa:c7:41:f4:77:00:c2:
9d:95:f0:97:25:b2:80:6b:5f:e2:28:d7:15:68:95:
f1:b4:77:c0:9b:76:55:a2:bf:8d:ac:16:6c:c1:91:
d9:48:46:4c:f3:a3:0f:e9:43:10:26:09:8d:79:84:
f0:8a:62:01:f7:08:cb:42:a4:f8:5b:65:ec:38:65:
1d:5d:ad:de:47:a0:e1:31:a1:f4:25:9d:54:a7:20:
d1:0f:44:0c:f0:e5:2c:da:86:5c:0e:1f:98:98:93:
2a:66:db:29:f9:fd:27:53:38:75:57:e8:ff:47:44:
10:e4:9f:d3:fc:f1:ff:af:87:16:89:cb:e7:70:c2:
3b:29:9c:24:fa:e0:c5:10:16:2c:e0:1c:86:76:01:
d0:2b:f5:56:73:a2:40:6e:58:c0:71:a1:0a:db:04:
bc:e9:5c:a6:30:0a:91:d5:e1:c0:f1:8c:48:d9:1e:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2A:98:38:0F:3C:2C:47:29:8A:01:11:E2:4D:43:03:DD:F1:88:7E
X509v3 Authority Key Identifier:
keyid:A5:FB:31:D4:D5:12:5F:7C:9A:AE:50:03:35:A4:80:FC:77:90:8F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pfsx1NUSX3yarlADNaSA_HeQjxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4A13/BB6C9B54B98011EDA37B1B65C4F9AE02/pfsx1NUSX3yarlADNaSA_HeQjxU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
55:fa:66:0f:fc:7c:4e:2d:2f:ee:f4:a0:23:6e:24:07:54:8e:
9a:b0:aa:69:53:c3:77:bd:72:45:9c:ed:6e:76:c0:f2:d7:34:
28:52:62:4a:49:22:36:47:9f:d5:50:76:fe:63:1f:3d:e8:97:
c1:77:20:16:e6:d5:d3:55:6c:bc:fc:64:6d:39:dd:84:81:a0:
08:6b:44:2c:d4:90:00:86:4f:3c:8b:a9:d9:9c:a8:3c:8c:c2:
a2:8a:bd:94:0e:99:1d:ec:da:69:e4:1c:b0:da:03:51:f8:65:
f8:bb:a1:2b:dc:1f:ca:ae:69:f2:7a:de:04:d4:4a:30:08:d0:
b0:2b:c1:b6:3b:29:42:94:10:da:fe:e7:b4:7e:17:f4:1a:8c:
34:77:39:79:36:08:dd:c6:65:59:93:36:72:47:8c:64:2a:8c:
02:0d:5a:eb:5b:4b:bf:1b:f5:c2:5d:11:ec:53:33:b2:80:ba:
37:74:7a:d9:d2:7b:08:93:86:01:90:b5:9d:b4:6b:34:4a:a0:
3b:61:f7:03:a9:71:e7:4d:ce:b4:23:de:0b:e6:1a:90:fb:b7:
26:36:a7:dd:73:99:0b:ce:3a:c0:f9:a9:04:85:97:f6:00:3b:
86:6f:55:ea:1f:b2:b4:af:2c:0d:bd:b8:18:7e:0a:2d:82:ff:
cf:24:c8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:13:30 2026 by rpki-client